RHSA-2020:5302: Important: Red Hat build of Quarkus 1.7.5 SP1 release and security update
This release of Red Hat build of Quarkus 1.7.5 SP1 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section.Security Fix(es): hibernate-core: SQL injection vulnerability when both hibernate.usesqlcomments and JPQL String literals are used(CVE-2020-25638) For more details about the security issues and their impact, the CVSS score, acknowledgments, and other related information see the CVE pages listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:5302?
The severity of RHSA-2020:5302 is classified as important due to the presence of security vulnerabilities.
How do I fix RHSA-2020:5302?
To fix RHSA-2020:5302, update to the latest version of the Red Hat build of Quarkus, specifically 1.7.5 SP1.
What security vulnerabilities are addressed in RHSA-2020:5302?
RHSA-2020:5302 addresses a SQL injection vulnerability in hibernate-core which can potentially be exploited.
Is it necessary to update for RHSA-2020:5302 if I am not using hibernate-core?
Even if you are not using hibernate-core, it is recommended to update to protect against other potential risks associated with the release.
What changes are included in RHSA-2020:5302 besides security updates?
RHSA-2020:5302 also includes bug fixes and enhancements alongside the security updates.